Vietnam. Comprehensive data protection. Decree
Decree 13Decree No. 13/2023/ND-CP on Personal Data Protection
Repealed/superseded
§1Summary
- Synopsis
Vietnam's first comprehensive data protection decree, which introduced impact assessment and transfer dossiers filed with A05. Superseded by the PDPL and Decree 356/2025.
- Key themes
- Unique features
Assessment filings made under it remain valid after repeal.
- SaaS relevance
Historic filings still count; new compliance follows PDPL.
§2Dates
- Key dates
- Adopted
- In force
- Ended
- Replaced by Decree 356/2025/ND-CP from 2026-01-01; prior DPIA/TIA filings remain valid
§3Text and authority
- Text
- Authoritative text vanban.chinhphu.vn
- Authority
- Ministry of Public Security – Department of Cybersecurity and High-tech Crime Prevention (A05)
§4Where it applies
- Domestic law of
- Vietnam
§5Sources and verification
- Verification
High confidence.
In-force date 2023-07-01 from general knowledge. [Link: official Vietnamese (vanban.chinhphu.vn)]